by olo-dot-io
One command for every interface—search, run, and inspect real software across APIs, browsers, desktops, local tools, and MCP.
# Add to your Claude Code skills
git clone https://github.com/olo-dot-io/Uni-CLILast scanned: 5/30/2026
{
"issues": [
{
"type": "npm-audit",
"message": "brace-expansion: brace-expansion: Large numeric range defeats documented `max` DoS protection",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "esbuild: esbuild enables any website to send any requests to the development server and read the response",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "vite: Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "vitepress: Vulnerability found",
"severity": "medium"
}
],
"status": "PASSED",
"scannedAt": "2026-05-30T16:11:49.769Z",
"npmAuditRan": true,
"pipAuditRan": true
}Uni-CLI is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by olo-dot-io. One command for every interface—search, run, and inspect real software across APIs, browsers, desktops, local tools, and MCP. It has 269 GitHub stars.
Yes. Uni-CLI passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.
Clone the repository with "git clone https://github.com/olo-dot-io/Uni-CLI" and add it to your Claude Code skills directory (see the Installation section above).
Uni-CLI is primarily written in TypeScript. It is open-source under olo-dot-io on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh Uni-CLI against similar tools.
No comments yet. Be the first to share your thoughts!
Based on votes and bookmarks from developers who liked this skill
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
Uni-CLI turns intent into a selected operation and a structured receipt across web, browser, desktop, local, and MCP surfaces.
npm install -g @zenalexa/unicli
unicli search "list the top Hacker News stories"
unicli hackernews top --limit 3 -f json
Check releases or open an interactive Y/N update choice.
unicli upgrade --check -f json
unicli upgrade
Persistent non-interactive Agent installations update in a detached worker by default. Structured output reports progress through meta.update.automatic_update. Interactive terminals keep the Y/N choice, and unicli upgrade --no-auto-update switches a machine back to explicit approval.
The catalog handles discovery and operation contracts. Execution then selects the strongest operator with the smallest effective scope. One provider runs; a failed path keeps its original cause and repair command.
| Task boundary | Execution operator | Why |
|---|---|---|
| Public data or stable service contract | Structured API | Typed fields, explicit auth, stable provenance |
| Files, system state, local tools | Local runtime | Direct process and OS boundaries without browser state |
| Authenticated or private web contract | Browser protocol | Explicit profile, cookie session, or network contract |
| Page-only web flow | Semantic browser | DOM and CDP semantics with an explicit target and session |
| Native desktop application | Accessibility | Structured AX, UIA, or AT-SPI control trees |
| Pixel-only or unstructured interface | Visual computer use | Coordinate and visual observation when no stronger interface exists |
unicli search "export my saved posts" # discover and rank
unicli list --site reddit # inspect one surface
unicli browser doctor --json # inspect browser delivery state
unicli repair reddit saved # verify a supported drift path
The public model stays compact.
intent → candidate operations → explicit selection → policy → substrate → receipt
| Stage | Runtime behavior |
|---|---|
| Discover | Compiled intent and bilingual retrieval return a small ranked set with selection evidence |
| Select | The caller chooses one operation with a declared strategy and substrate |
| Govern | open, confirm, and locked profiles evaluate effect and capability scope |
| Act | The selected adapter, core command, browser, desktop, or protocol path executes |
| Observe | Every normal command returns a stable success or error envelope |
| Repair | Owned drift paths expose their source, failed boundary, and bounded verification command |
| Evolve | Recorded failures become isolated candidates that must pass paired and held-out evaluation |
Uni-CLI supplies the interface runtime. The model, planner, agent loop, and sandbox remain independent choices.
| Surface | Current runtime |
|---|---|
| Web | Public data, cookies, headers, downloads, uploads, publishing, search, and Chinese platforms |
| Browser | CDP navigation, semantic action, network, snapshots, screenshots, and post-action evidence |
| Desktop | Native controls, macOS services, design tools, Office, and media applications |
| Local | Subprocess bridges, files, PDF and paper workflows, media transforms, and developer CLIs |
| Protocols | Native CLI, MCP stdio, MCP Streamable HTTP, ACP, generated configs, and agent skills |
| Policy | Permission profiles, deny rules, scoped approvals, recordings, replay, and evidence |
Static catalog
Fixed core and host-discovered commands join at runtime.
| Surface | Sites | Operations | Examples |
|---|---|---|---|
| social | 33 | 396 | twitter, zhihu, instagram, reddit |
| video | 8 | 75 | tiktok, youtube, bilibili, douyin |
| news | 11 | 45 | hackernews, bloomberg, bbc, 36kr |
| finance | 10 | 67 | eastmoney, xueqiu, binance, coingecko |
| shopping | 13 | 47 | amazon, jd, taobao, 1688 |
| dev | 37 | 185 | codex, cursor, gh, stackoverflow |
| ai | 25 | 215 | chatgpt, antigravity, chatwise, notebooklm |
| scholarly | 30 | 105 | openreview, zotero, pubmed, arxiv |
| patent | 17 | 42 | epo, espacenet, cipo, cnipa |
| reference | 12 | 47 | marxists-cn, anilist, bangumi, imdb |
| audio | 4 | 46 | spotify, netease-music, xiaoyuzhou, apple-podcasts |
| content | 16 | 90 | lesswrong, danbooru, dlsite, weread |
| productivity | 10 | 78 | notion-app, [ones](https://olo-dot-io.github.io/Uni-CLI/refer |